{
  "batch": "read1-110",
  "plugins": [
    {
      "pr": 0,
      "name": "done-bell",
      "does": "Adds turn-completion and approval notifications, a chime, and a Desktop status chip.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Uses real lifecycle hooks and Desktop busy-state observation, with mute controls and local state that omit approval commands.",
      "worst": "The README requires a manual Windows Desktop-copy workaround, and the small Python suite does not verify the Desktop watcher or native notifications.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 0,
      "name": "homeassistant",
      "does": "Connects Hermes to Home Assistant with filtered state-change events, notification delivery, and four device-query/control tools.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 25,
      "best": "Combines an actual gateway platform with scoped secrets, reconnect logic, entity policies, blocked execution domains, and focused policy regressions.",
      "worst": "Entity restrictions are opt-in, and service calls without them retain the broad authority of the Home Assistant token.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 150230,
      "name": "hermes-android",
      "does": "Controls a paired Android device through 58 tools and a self-hosted relay with a Kotlin companion app.",
      "useful": 4,
      "reliable": 2,
      "polish": 3,
      "creative": 4,
      "beyond": 5,
      "total": 23,
      "best": "Provides extensive physical-device capabilities, phone-side capability gates, human approval for selected risky tools, and regression tests that reject gated macro steps.",
      "worst": "The shipped android_relay.py loads ANDROID_AGENT_TOKEN_* credentials from relay-config.json rather than Hermes secrets; setup docs also mix stale tool counts and German instructions.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149855,
      "name": "creature-workshop",
      "does": "Exposes a shellops project's declared toolchain, installation, testing and linting through Hermes tools, session hooks and a Desktop pane.",
      "useful": 3,
      "reliable": 3,
      "polish": 4,
      "creative": 3,
      "beyond": 4,
      "total": 21,
      "best": "Coordinates the agent and Desktop on a user-selected repository, checks project consent centrally, and strips most inherited environment variables from child processes.",
      "worst": "Requires the shellops project layout, executes approved project scripts outside the terminal sandbox, and the pinned tree contains no dedicated plugin regression suite.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153581,
      "name": "hermes-templates",
      "does": "Shares and installs curated Hermes profile bundles through a CLI and Desktop page, with optional GitHub publishing.",
      "useful": 4,
      "reliable": 1,
      "polish": 4,
      "creative": 3,
      "beyond": 5,
      "total": 22,
      "best": "Implements a complete preview-and-install product with checksum and archive-path validation, paused packed routines, screenshots, and extensive safety tests.",
      "worst": "The installer copies self-indexed bundles without re-sanitizing config or pausing imported cron jobs, so a hand-built bundle can activate unsafe behavior despite its preview; it also directly reads .env files.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152831,
      "name": "adapt",
      "does": "Implements a memory-provider adapter for tiered persistent recall, preference capture, and pre-compaction preservation, but lacks its required storage package.",
      "useful": 4,
      "reliable": 1,
      "polish": 3,
      "creative": 2,
      "beyond": 5,
      "total": 20,
      "best": "The provider integrates recall and compaction handling into the agent lifecycle and includes tests describing continuity, retrieval and owner isolation.",
      "worst": "The pinned tree omits adapt/storage even though engine.py and tests import adapt.storage modules, so the provider cannot import as shipped despite the passing-test claims.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 152173,
      "name": "agent-almanac-first-aid",
      "does": "Detects repeated tool failures and context compaction, suggests bundled recovery practices, and records a session logbook.",
      "useful": 3,
      "reliable": 4,
      "polish": 4,
      "creative": 3,
      "beyond": 3,
      "total": 20,
      "best": "Uses bounded per-session state, cooldowns and extensive regression tests, while keeping failure annotations out of known unattended runs and untrusted results.",
      "worst": "Its intervention is mainly skill advice, and annotating attended failures resets result hashes and delays core stall/cycle notices, as the README explicitly discloses.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 151257,
      "name": "ichor",
      "does": "Captures user corrections, retries and undos as scrubbed preference pairs, with review cards, TRL/Atropos export and optional Hugging Face sharing.",
      "useful": 4,
      "reliable": 3,
      "polish": 4,
      "creative": 4,
      "beyond": 5,
      "total": 25,
      "best": "Turns ordinary agent corrections into user-reviewed training data through lifecycle hooks, local scrubbing and usable export formats without automatically retraining a model.",
      "worst": "The live _windows.open call omits session_key, so replies.py permits another direct chat on the same platform to settle the sole open card; its chat-isolation tests supply a key the live path never supplies.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153955,
      "name": "shadow",
      "does": "Replays saved conversations on current and candidate models, compares answers blind in both orders, and supports guarded model switching with undo.",
      "useful": 5,
      "reliable": 4,
      "polish": 5,
      "creative": 4,
      "beyond": 5,
      "total": 28,
      "best": "Combines useful model evaluation with dual replay-tool guards, live isolation verification, spending accounting, switch rollback, extensive regression tests and a finished Desktop interface.",
      "worst": "Compatibility depends on numerous private Hermes helpers and hook-based isolation; the disclosed plugin-reload hook-clear window remains a safety limitation.",
      "standout": true,
      "blocked": null
    },
    {
      "pr": 150282,
      "name": "openrouter-everything",
      "does": "Adds OpenRouter-backed web, image, video, speech and transcription providers plus decision, extraction, reranking, embedding and configuration tools.",
      "useful": 4,
      "reliable": 4,
      "polish": 4,
      "creative": 2,
      "beyond": 5,
      "total": 24,
      "best": "Makes five native Hermes capabilities available through one profile-scoped key, with task/model checks, bounded video polling and detailed protected-media-path regression tests.",
      "worst": "Much of the value consolidates existing services; web extraction returns model-generated text rather than guaranteed original content, and capability validation allows requests when catalog retrieval fails.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 149927,
      "name": "patchreview",
      "does": "Requests native Hermes human approval with a diff before recognized file-writing tool calls.",
      "useful": 4,
      "reliable": 3,
      "polish": 3,
      "creative": 2,
      "beyond": 4,
      "total": 20,
      "best": "Adds a real pre-execution review gate without model-callable approval tools or a separate file writer, and tests exact replacements and fail-closed unsupported patches.",
      "worst": "_extract_change resolves relative paths against process cwd while the hook discards session context, so its preview may describe a different target; shell writes and opaque patches are not covered.",
      "standout": false,
      "blocked": null
    },
    {
      "pr": 153863,
      "name": "common-ground",
      "does": "Stores collaboration goals, contributions, evidence and versioned commitments, with reviewed proposals, discrepancy handling, queries and Markdown briefs.",
      "useful": 3,
      "reliable": 4,
      "polish": 3,
      "creative": 3,
      "beyond": 3,
      "total": 19,
      "best": "Implements transactional proposal application, stable history, exact source-quote checks, stale-write protection and contained exports, with substantive persistence and concurrency tests.",
      "worst": "Extraction and approval still depend on the model following the workflow: apply is directly callable, and the reported guided demo required corrections to inferred commitments and deadline handling.",
      "standout": false,
      "blocked": null
    }
  ]
}